Support for xdomain-only cookies

support for xdomain_only cookies (aka no local cache) + a few bugfixes and logic changes to support better async operation